sha3 vulnerabilities

CVEs whose affected-version data names the sha3 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-37454Critical· 9.8PoC

4y ago

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge…

▾ Abyssalextended_keccak_code_package_project · extended_keccak_code_packageEPSS 7.4%via NVD